linux/drivers/media
Hyunwoo Kim 280a8ab817 media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
If the device node of dvb_ca_en50221 is open() and the
device is disconnected, a UAF may occur when calling
close() on the device node.

The root cause is that wake_up() and wait_event() for
dvbdev->wait_queue are not implemented.

So implement wait_event() function in dvb_ca_en50221_release()
and add 'remove_mutex' which prevents race condition
for 'ca->exit'.

[mchehab: fix a checkpatch warning]

Link: https://lore.kernel.org/linux-media/20221121063308.GA33821@ubuntu
Signed-off-by: Hyunwoo Kim <v4bel@theori.io>
Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
2023-05-14 16:04:48 +01:00
..
cec media: cec: core: not all messages were passed on when monitoring 2023-04-15 07:48:39 +01:00
common media: common: saa7146: add support for missing .vidioc_try_fmt_vbi_cap 2023-04-15 08:55:16 +01:00
dvb-core media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 2023-05-14 16:04:48 +01:00
dvb-frontends media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table 2023-05-14 06:30:16 +01:00
firewire
i2c media: ov5670: Fix probe on ACPI 2023-04-25 08:30:18 +01:00
mc media: mc-device: remove unnecessary __must_check 2023-04-11 18:54:01 +02:00
mmc
pci media: netup_unidvb: fix irq init by register it at the end of probe 2023-05-14 06:30:13 +01:00
platform media: platform: mtk-mdp3: work around unused-variable warning 2023-05-08 12:11:25 +01:00
radio USB / Thunderbolt changes for 6.4-rc1 2023-04-27 11:42:11 -07:00
rc Driver core changes for 6.4-rc1 2023-04-27 11:53:57 -07:00
spi
test-drivers media: Zero-initialize all structures passed to subdev pad operations 2023-04-12 09:46:06 +02:00
tuners media: it913x: Convert to platform remove callback returning void 2023-04-11 16:59:21 +02:00
usb media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() 2023-05-14 06:30:16 +01:00
v4l2-core media: Add ABGR64_12 video format 2023-04-15 09:11:30 +01:00
Kconfig media: Kconfig: Make DVB_CORE=m possible when MEDIA_SUPPORT=y 2022-12-07 17:58:46 +01:00
Makefile